[wp-trac] [WordPress Trac] #65025: Privacy Shield is declared invalid
WordPress Trac
noreply at wordpress.org
Sun Apr 5 06:01:53 UTC 2026
#65025: Privacy Shield is declared invalid
-------------------------------------------------+-------------------------
Reporter: timse201 | Owner: (none)
Type: enhancement | Status: new
Priority: normal | Milestone: Awaiting
| Review
Component: Privacy | Version: trunk
Severity: normal | Resolution:
Keywords: has-patch needs-privacy-review | Focuses: privacy
needs-testing |
-------------------------------------------------+-------------------------
Changes (by masteradhoc):
* keywords: has-patch => has-patch needs-privacy-review needs-testing
Comment:
Hey @timse201
Good catch! This definately needs some update.
The EU-U.S. Privacy Shield was invalidated by the CJEU in July 2020
(Schrems II, Case C-311/18) and is no longer a valid data transfer
mechanism. The current replacement is the EU-U.S. Data Privacy Framework
(DPF), adopted by the European Commission on 10 July 2023.
Proposed change:
Before:
''...whether that is through an agreement such as Privacy Shield, model
clauses in your contracts, or binding corporate rules.''
After:
''...whether that is through an agreement such as the EU-U.S. Data Privacy
Framework (DPF), Standard Contractual Clauses (SCCs), or binding corporate
rules.''
References:
- FTC on DPF replacing Privacy Shield: https://www.ftc.gov/business-
guidance/privacy-security/data-privacy-framework
- European Commission DPF Q&A:
https://ec.europa.eu/commission/presscorner/detail/en/qanda_23_3752
- DPF programme website: https://www.dataprivacyframework.gov
- NOYB reaction to General Court ruling (Sept 2025): https://noyb.eu/en
/eu-us-data-transfers-first-reaction-latombe-case
--
Ticket URL: <https://core.trac.wordpress.org/ticket/65025#comment:2>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
More information about the wp-trac
mailing list